public inbox for gcc-help@gcc.gnu.org
 help / color / mirror / Atom feed
* Security Point of Contact
@ 2022-05-25 16:59 Marius Muench
  2022-05-25 19:35 ` Florian Weimer
  0 siblings, 1 reply; 2+ messages in thread
From: Marius Muench @ 2022-05-25 16:59 UTC (permalink / raw)
  To: gcc-help; +Cc: Fabian Freyer, v.m.duta, Cristiano Giuffrida, pagani

Dear GCC maintainers,

We are a group of researchers from VU Amsterdam, UC Santa Barbara, and 
independents.
We found a potential security issue with the implementation of the 
Itanium C++ ABI unwinding process, and were wondering if you have any 
secure email contact point we can follow up on with additional details, 
or whether we should post it directly to the public bugtracker after 
coordinating with other affected parties.
Either way, we would like to disclose the information as soon as possible.

Best,
Fabian, Victor, Fabio, Marius & Cristiano

^ permalink raw reply	[flat|nested] 2+ messages in thread

* Re: Security Point of Contact
  2022-05-25 16:59 Security Point of Contact Marius Muench
@ 2022-05-25 19:35 ` Florian Weimer
  0 siblings, 0 replies; 2+ messages in thread
From: Florian Weimer @ 2022-05-25 19:35 UTC (permalink / raw)
  To: Marius Muench via Gcc-help
  Cc: Marius Muench, pagani, Cristiano Giuffrida, Fabian Freyer, v.m.duta

* Marius Muench via Gcc-help:

> We are a group of researchers from VU Amsterdam, UC Santa Barbara, and
> independents.
> We found a potential security issue with the implementation of the
> Itanium C++ ABI unwinding process, and were wondering if you have any 
> secure email contact point we can follow up on with additional
> details, or whether we should post it directly to the public
> bugtracker after coordinating with other affected parties.
> Either way, we would like to disclose the information as soon as possible.

Please file a public bug once you are ready.  This does not sound like
something that would benefit a lot from pre-disclosure coordination.

Thanks,
Florian


^ permalink raw reply	[flat|nested] 2+ messages in thread

end of thread, other threads:[~2022-05-25 19:35 UTC | newest]

Thread overview: 2+ messages (download: mbox.gz / follow: Atom feed)
-- links below jump to the message on this page --
2022-05-25 16:59 Security Point of Contact Marius Muench
2022-05-25 19:35 ` Florian Weimer

This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for read-only IMAP folder(s) and NNTP newsgroup(s).